Clipbasket Privacy Policy

Last updated: August 17, 2026

This policy explains what data the Clipbasket macOS application ("Clipbasket," "the app") handles, what stays on your device, and what leaves it. It describes the app version it accompanies. The data controller is Latent Software LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Contact: [email protected].

The short version:

• Your clipboard history never leaves your device. It is stored in a local database on your Mac. There is no cloud sync, no account, and no server that receives your clips.
• The app contains no analytics, tracking, or crash-reporting SDKs.
• The app connects to the network only for: license activation/validation, requesting a demo license (if you ask for one), software updates, and (for links you copy) fetching a small preview of the linked page. Each is detailed below.

1. Data stored locally on your device

When Clipbasket is licensed and running, it records items you copy to the system clipboard into a local SQLite database at ~/Library/Application Support/com.clipbasket.desktop/clips.db, with image and file assets in the same folder.

For each clipboard item this can include: the text, HTML, or link you copied; copied images and their thumbnails; the names/paths of copied files; the name of the app you copied from; text recognized inside copied images (OCR, on device); and, for copied links, the site's title, description, and preview image.

About this local history:

• Confidential copies are skipped by default. Content that password managers and other apps mark as concealed or transient (the org.nspasteboard.ConcealedType convention) is not recorded unless you turn the "ignore confidential copies" setting off. If you disable that setting, or an app fails to mark sensitive content, whatever you copy is recorded.
• You can delete individual items or your whole history in the app; history is capped at a configurable maximum number of clips.
• The history is protected by your macOS user account and disk (FileVault) protections only; it is not separately encrypted. Anyone with access to your macOS user account can read it.
• OCR of copied images runs entirely on your device using Apple's Vision framework; images are not sent anywhere for recognition.
• Uninstalling Clipbasket does not automatically delete the data folder; you can remove ~/Library/Application Support/com.clipbasket.desktop/ yourself.

Settings (including your keyboard shortcut and preferences) are stored in a local settings.json.

2. Network connections the app makes

Any internet connection inherently discloses your IP address to the server contacted. The app makes the following kinds of connections — and, as of the version this policy accompanies, no others:

2.1 License activation and validation — licenseseat.com

When you activate a license and periodically afterwards, the app contacts the LicenseSeat licensing service (https://licenseseat.com/api/v1) and transmits your license key, an app-generated random installation identifier ("fingerprint"), license state, and basic environment information: your operating system name and version, device type (e.g. desktop), CPU architecture and core count, approximate memory size, system locale, language, timezone, and the app's own version and build. We use this to understand which versions are in use and which environments we must keep supporting. It does not transmit your hostname, hardware serial numbers, or raw hardware identifiers, and clipboard content is never included.

2.2 Demo license requests — licenseseat.com

If you request a free demo license, the app sends the email address you enter (and the app's publishable product key) to https://licenseseat.com/api/v1/products/clipbasket/demo_license, solely so the demo key can be emailed to you. The app itself receives back only a neutral "sent" outcome. If you never request a demo, this request never happens.

2.3 Software updates — licenseseat.com / updates.clipbasket.com

The app periodically checks a signed update feed (https://licenseseat.com/p/clipbasket/tauri/latest.json, falling back to https://updates.clipbasket.com) and downloads updates you accept. The request carries no personal data beyond what any HTTPS request carries (IP address, app user agent). Automatic checks can be turned off in Settings.

2.4 Link previews — the sites behind links you copy

When you copy a URL, Clipbasket fetches that page (and its icon/preview image) directly from the site you copied, to show a title, favicon, and thumbnail in your history. The operator of that site sees a request from your IP address with the user agent Clipbasket/<version> (+https://clipbasket.com). Requests are restricted to public internet hosts, capped in size and time, and fetched previews are stored only locally.

(Resolved 2026-08-10: the policy discloses link previews as always-on, which is accurate on main — AppSettings has no toggle. A preview disable toggle is queued as a post-launch product improvement; when it ships, soften this section to describe the setting.)

3. Data processed when you buy a license

Purchases happen on Stripe's checkout pages, not in the app:

• Stripe processes your payment and collects your email and payment details under its own privacy policy (https://stripe.com/privacy). We never receive your card number.
• LicenseSeat receives the purchase event from Stripe and stores your email address and name (as entered at checkout) to create your license, email you the key, operate the license-recovery portal at https://licenseseat.com/license_manager/clipbasket, and revoke licenses on refunds or chargebacks.
• At checkout we also record your express consent to immediate delivery and your acknowledgment that delivery ends your EU right of withdrawal, where applicable — we keep that record to prove compliance (see docs/legal/checkout-consent.md).

We use purchase data only to deliver and manage licenses, prevent fraud and license abuse, comply with tax/accounting obligations, and establish, exercise, or defend legal claims. We do not sell personal data and do not use it for advertising. We do not send newsletters or marketing email; if we ever introduce them, they will require their own opt-in consent and their own disclosure in this policy first.

4. Legal bases (EU/EEA users)

Where the GDPR (Regulation (EU) 2016/679) applies, our legal bases are: performance of a contract (issuing, validating, and delivering your license or demo license — Art. 6(1)(b)); legitimate interests (securing the software against license fraud and abuse, providing updates, defending legal claims — Art. 6(1)(f)); and legal obligation (tax and accounting records — Art. 6(1)(c)). Clipboard history is processed locally on your device by software under your control and is not transmitted to us.

5. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export the personal data we hold about you (for most users this is only the purchase/license record: email, name, license key, activation records), and to object to or restrict processing — under GDPR Arts. 15–21 or the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.). To exercise them, email [email protected]. Exercising statutory rights is free; we may decline requests that are manifestly unfounded or excessive, or where an exemption applies, and we will explain why. You can deactivate devices yourself in the license manager, and your clipboard history is yours to delete directly in the app or by removing the app's data folder (Section 1).

6. Retention

• Clipboard history: on your device, under your control, until you delete it (or the configured cap rotates old items out).
• License and purchase records (on LicenseSeat/Stripe): for as long as your license may be active, plus the period required for tax, accounting, and fraud-prevention purposes, plus any period needed to establish, exercise, or defend legal claims — in practice seven (7) years for transaction and bookkeeping records, reflecting US federal tax record-keeping practice for the seller entity (Latent Software LLC, a Wyoming limited liability company).
• Withdrawal-consent records (Section 3): for as long as a claim under the purchase could be brought.

7. Children

Clipbasket is a productivity tool not directed at children under 16, and we do not knowingly collect personal data from them.

8. Changes

We will post changes to this policy at https://clipbasket.com/privacy and update the date at the top. Material changes to what the app transmits are called out in release notes; each app version is governed by the policy version that accompanies it.

9. Contact

Latent Software LLC 30 N Gould St, Ste N Sheridan, WY 82801, USA

Email: [email protected] (legal notices may also be sent to [email protected]).